Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.
PayPal data breach overview:
- Who: PayPal revealed that it suffered a data breach as a result of a credential stuffing attack that exposed the personal information of nearly 35,000 of its users.
- Why: PayPal says the data breach was the result of a credential stuffing attack but that it found no evidence the threat actor obtained the stolen credentials from it directly.
- Where: PayPal is used by consumers nationwide.
PayPal has notified its users of a data breach the e-commerce company says it suffered as a result of a credential stuffing attack that it says exposed some personal data of nearly 35,000 users.
The data breach reportedly occurred between Dec. 6 and 8, 2022, according to PayPal, which said it was able to both detect and mitigate the breach at that time.
PayPal said that it also conducted an internal investigation — which concluded Dec. 20 — into determining how the bad actors were able to gain access to the compromised accounts.
The company ultimately found the unauthorized third parties were able to log into the affected PayPal accounts using valid credentials.
PayPal said it found no evidence the stolen user credentials were acquired from them directly and that the data breach was not due to any sort of breach on the company’s systems.
The data breach granted hackers access to impacted PayPal account holders full names, birthdates, Social Security numbers, postal addresses and individual tax identification numbers.
PayPal says it mitigated data breach by limiting access and resetting passwords of compromised accounts
Other information that may have been compromised during the PayPal data breach includes transaction histories and connected credit or debit card details, along with company invoicing data.
PayPal said it mitigated the data breach by limiting the bad actors’ access to the platform and by resetting the passwords for accounts that it confirmed had been compromised.
The company also reassured users it found no evidence the bad actors either attempted to or managed to perform an unauthorized transaction from an affected PayPal account.
“We have no information suggesting that any of your personal information was misused as a result of this incident, or that there are any unauthorized transactions on your account,” PayPal said.
A class action lawsuit was filed against PayPal last year by a consumer arguing the company fails to reimburse its customers who suffer losses as a result of fraud on its Venmo mobile payment service.
Have you been impacted by a data breach? Let us know in the comments.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
1,203 thoughts onPayPal data breach affects thousands of users
I was hacked twice in PayPal over the Christmas/New Year Holiday. I did everything to change passwords a million times. They refunded my money, but I don’t trust PayPal ever again with one cent of my money. If there is a lawsuit, please add me to to it for emotional and financial pain and suffering
Please add me to this lawsuit
Add me! I’ve been hacked on PayPal and you wouldn’t believe the emails and stuff I get I spend do much time changing passwords and deleting emails awful
Add me I’ve been hacked about 6xs I need paid for damages and pain and suffering
Please contact me regarding this data breach which I was affected by and suffered losses. I also want to assert a second claim for improper seizure of $2,000 in a friend’s/family transaction (created health issue and expenses to denied recipient), and retaliatory freezing of my PayPal account when I enlisted PNC bank to expose their lies and get my money back. My account remains frozen (although they still accept funds into it, but won’t release any out), 2 months and counting. I need urgent help please!
Well it’s funny how I’m only knowing about this or any data breach lawsuit because I was trying to find a password and under my saved pass words I had a notice that 84 are compromised . I have 84 data breach with my information somewhere. 84 omg that’s so scary and I haven’t been notified by not one of the 84 that my information was compromised in data breach not even PayPal that claims they notified people I beg to differ. And I have 3 PayPal accounts that is affected. Now what am I supposed to do. That’s a lot of companies and my information can be God knows where for God knows what. I’m scared of what I’m up against. I just can’t believe it 84 companies
I was just hacked into my PayPal account for $8000.00 ! I need help. Is there a lawsuit in place in texas . They got everything stole my identity !
PayPal
I have been in this situation I have cowed and try to resolve this issue due to my identity and a lot of issues and PayPal says otherwise someone please add me so I can get this resolved
Please add me I think that I was affected by this because this all happened at themeda last year and the beginning of this year and now I am trying to recover from it